Add poc-yaml-apache-nifi-api-unauthorized-access (chaitin#1462)

li95 · Nov 4, 2021 · a7bee49 · a7bee49
1 parent 2d2cd26
commit a7bee49
Showing 1 changed file with 16 additions and 0 deletions.
diff --git a/pocs/apache-nifi-api-unauthorized-access.yml b/pocs/apache-nifi-api-unauthorized-access.yml
@@ -0,0 +1,16 @@
+name: poc-yaml-apache-nifi-api-unauthorized-access
+manual: true
+transport: http
+rules:
+    r0:
+        request:
+            cache: true
+            method: GET
+            path: /nifi-api/flow/current-user
+            follow_redirects: false
+        expression: response.status == 200 && response.content_type.contains("json") && response.body.bcontains(b"\"identity\":\"anonymous\",\"anonymous\":true")
+expression: r0()
+detail:
+    author: wulalalaaa(https://github.com/wulalalaaa)
+    links:
+        - https://nifi.apache.org/docs/nifi-docs/rest-api/index.html